HOTSPOTYou purchase a new Azure subscription named Subscription1.You create a virtual machine named VM1 in Subscription1. VM1 is not protected by Azure Backup. You need to protect VM1 by using Azure Backup. Backups must be created at 01:00 and stored for 30 days.What should you do? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.Answer:Explanation:Box 1: A Recovery Services vaultA Recovery Services vault is an entity that stores all the backups and recovery points you create over time.Box 2: A backup policyWhat happens when I change my backup policy?When a new policy is applied, schedule and retention of the new policy is followed. References:https://docs.microsoft.com/en-us/azure/backup/backup-configure-vaulthttps://docs.microsoft.com/en-us/azure/backup/backup-azure-backup-faq

Question: 20

DRAG DROPYou have an availability set named AS1 that contains three virtual machines named VM1, VM2, and VM3.You attempt to reconfigure VM1 to use a larger size. The operation fails and you receive an allocation failure message.You need to ensure that the resize operation succeeds.Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Answer:Question: 21

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.You receive a notification that VM1 will be affected by maintenance. You need to move VM1 to a different host immediately.Solution: From the Redeploy blade, you click Redeploy. Does this meet the goal?

Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have an Azure virtual machine named VM1. VM1 was deployed by using a custom Azure Resource Manager template named ARM1.json.You receive a notification that VM1 will be affected by maintenance. You need to move VM1 to a different host immediately.Solution: From the Overview blade, you move the virtual machine to a different resource group. Does this meet the goal?

DRAG DROPYou have an Azure subscription. The subscription includes a virtual network named VNet1. Currently, VNet1 does not contain any subnets.You plan to create subnets on VNet1 and to use application security groups to restrict the traffic between the subnets. You need to create the application security groups and to assign them to the subnets.Which four cmdlets should you run in sequence? To answer, move the appropriate cmdlets from the list of cmdlets to the answer area and arrange them in the correct order.Answer:

HOTSPOTYou have an Azure subscription named Subscription1. Subscription1 contains the virtual machines in the following table.

Subscription1 contains a virtual network named VNet1 that has the subnets in the following table.

VM3 has a network adapter named NIC3. IP forwarding is enabled on NIC3. Routing is enabled on VM3.You create a route table named RT1. RT1 is associated to Subnet1 and Subnet2 and contains the routes in the following table.

You apply RT1 to Subnet1.For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.Answer:

Explanation: Box 1: YesTraffic from VM1 and VM2 can reach VM3 thanks to the routing table, and as IP forwarding is enabled on VM3, traffic from VM3 can reach VM1.Box 2: NoVM3, which has IP forwarding, must be turned on, in order for traffic from VM2 to reach VM1. Box 3: YesThe traffic from VM1 will reach VM3, which thanks to IP forwarding, will send the traffic to VM2.References: https://www.quor a.com/What-is-IP-forwarding

Question: 26

HOTSPOTYou plan to deploy five virtual machines to a virtual network subnet.Each virtual machine will have a public IP address and a private IP address. Each virtual machine requires the same inbound and outbound security rules.What is the minimum number of network interfaces and network security groups that you require? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Answer:

Explanation: Box 1: 10One public and one private network interface for each of the five VMs. Box 2: 1You can associate zero, or one, network security group to each virtual network subnet and network interface in a virtual machine. The same network security group can be associated to as many subnets and network interfaces as you choose.References:https://docs.microsoft.com/en-us/azure/virtual-network/security-overview

Question: 27

You have two subscriptions named Subscription1 and Subscription2. Each subscription is associated to a different Azure AD tenant.Subscription1 contains a virtual network named VNet1.VNet1 contains an Azure virtual machine named VM1 and has an IP address space of 10.0.0.0/16.Subscription2 contains a virtual network named VNet2. VNet2 contains an Azure virtual machine named VM2 and has an IP address space of 10.10.0.0/24.You need to connect VNet1 to VNet2. What should you do first?

Explanation:The virtual networks can be in the same or different regions, and from the same or different subscriptions. When connecting VNets from different subscriptions, the subscriptions do not need to be associated with the same Active Directory tenant.Configuring a VNet-to-VNet connection is a good way to easily connect VNets. Connecting a virtual network to another virtual network using the VNet-to-VNet connection type (VNet2VNet) is similar to creating a Site-to-Site IPsec connection to an on-premises location. Both connectivity types use a VPN gateway to provide a secure tunnel using IPsec/IKE, and both function the same way when communicating.The local network gateway for each VNet treats the other VNet as a local site. This lets you specify additional address space for the local network gateway in order to route traffic.References: https://docs.microsoft.com/en-us/azure/vpn-gateway/vpn-gateway-howto-vnet-vnet- resource-manager-portal

Question: 28

HOTSPOTYou have an Azure subscription named Subscription1. Subscription1 contains the resources in the following table.

In Azure, you create a private DNS zone named adatum.com. You set the registration virtual network to VNet2. The adatum.com zone is configured as shown in the following exhibit.For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

Answer:

Explanation: Box 1: NoAzure DNS provides automatic registration of virtual machines from a single virtual network that’s linked to a private zone as a registration virtual network. VM5 does not belong to the registration virtual network though.Box 2: NoForward DNS resolution is supported across virtual networks that are linked to the private zone as resolution virtual networks. VM5 does belong to a resolution virtual network.Box 3: YesVM6 belongs to registration virtual network, and an A (Host) record exists for VM9 in the DNS zone. By default, registration virtual networks also act as resolution virtual networks, in the sense that DNS resolution against the zone works from any of the virtual machines within the registration virtual network.References:

HOTSPOTYou have an Azure subscription named Subscription1. Subscription1 contains a virtual machine named VM1.You install and configure a web server and a DNS server on VM1.VM1 has the effective network security rules shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.NOTE: Each correct selection is worth one point.